CVE-2018-1550

IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users. IBM X-Force ID: 142696...

CVE-2018-1785

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870...

CVE-2018-1768

IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file. IBM X-Force ID: 148622...

CVE-2018-1550

CVE-2018-1550 affects IBM Spectrum Protect family (Client, Data Protection for VMware, Space Management). The IBM bulletin confirms a local-access vulnerability where a local user could corrupt or delete highly sensitive information, leading to a denial of service for other users. Affected versio...

CVE-2018-1550

IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users. IBM X-Force ID: 142696...

CVE-2018-1545

The CVE-2018-1545 issue affects IBM Spectrum Protect family (IBM Spectrum Protect Client and IBM Spectrum Protect for Virtual Environments) where legacy SSL/TLS protocols and weak ciphers could allow decryption of highly sensitive data. The IBM security bulletin clarifies affected versions: Clien...

CVE-2018-1768

IBM Spectrum Protect Plus 10.1.0 and 10.1.1 are affected by CVE-2018-1768, which can disclose user IDs and passwords in plain text within an instrumentation log file when an authorized user runs a test operation. The root cause is sensitive credentials being written to logs. Affected platforms in...

Security Bulletin: Public disclosed vulnerability from Apache Struts affects IBM Spectrum LSF Explorer

Summary Public disclosed vulnerability CVE-2018-11776 from Apache Struts affects IBM Spectrum LSF Explorer. Vulnerability Details CVEID: CVE-2018-11776 DESCRIPTION: Apache Struts namespace code execution CVSS Base Score: 9.8 CVSS Temporal Score: See for the current score CVSS Environmental Score:...

Security Bulletin: Remote code execution vulnerability (CVE-2018-1260) affects IBM Spectrum Symphony 7.2.0.2 and 7.2.1

Summary Interim fixes are needed to upgrade the Spring Security OAuth package in IBM Spectrum Symphony 7.2.0.2 and 7.2.1 to resolve the remote code execution vulnerability CVE-2018-1260. Vulnerability Details CVEID: CVE-2018-1260 DESCRIPTION: Pivotal Spring Security OAuth could allow a remote...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6&7 and IBM® Runtime Environment Java™ Version 6&7 used by IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation. IBM...

Security Bulletin: WebSphere Application Server LIBERTY is not honoring SSL transport in limited situations affects IBM Spectrum LSF Application Center

Summary WebSphere Application Server LIBERTY is not honoring SSL transport in limited situations, affects IBM Spectrum LSF Application Center. Vulnerability Details CVEID: CVE-2018-1755 DESCRIPTION: WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM Spectrum LSF Analytics

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 and IBM® Runtime Environment Java™ Version 7 used by IBM Spectrum LSF Analytics. IBM Spectrum LSF Analytics has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the I...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ that is used by IBM Spectrum Protect formerly Tivoli Storage Manager for Virtual Environments: Data Protection for VMware and Data Protection for Hyper-V. These issues were disclosed as part of the IBM Java SDK updates i...

Security Bulletin: Vulnerability in IBM Java Runtime affects IBM Spectrum Protect (formerly Tivoli Storage Manager) Windows and Macintosh Client (CVE-2018-2783)

Summary Multiple vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in April 2018. IBM® Runtime Environment Java™ is used by the IBM Spectrum Protect formerly Tivoli Storage Manager Windows and Macintosh Client. Vulnerability Details CVEID:...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware

Summary OpenSSL vulnerabilities were disclosed on March 27, 2018 by the OpenSSL Project. OpenSSL, used by the IBM Spectrum Protect formerly Tivoli Storage Manager Client and IBM Spectrum Protect for Virtual Environments formerly Tivoli Storage Manager for Virtual Environments: Data Protection for...

Security Bulletin: Password disclosure via instrumentation log file in IBM Spectrum Protect Plus (CVE-2018-1768)

Summary IBM Spectrum Protect Plus may display the user id and password in plain text within the instrumentation log file. Vulnerability Details CVEID: CVE-2018-1768 DESCRIPTION: IBM Spectrum Protect Plus could disclose sensitive information when an authorized user executes a test operation, the...

Security Bulletin: PostgreSQL vulnerability affects IBM Spectrum Protect Plus (CVE-2017-15097)

Summary A vulnerability in PostgreSQL affects IBM Spectrum Protect™ Plus. This vulnerability could result in a local authenticated attacker gaining elevated privileges on the system. Vulnerability Details CVEID: CVE-2017-15097 DESCRIPTION: PostgreSQL could allow a local authenticated attacker to...

Security Bulletin: Multiple vulnerabilities in Oracle Java SE affect IBM Spectrum Protect Plus

Summary There are multiple vulnerabilities in Oracle Java SE which is used by IBM Spectrum Protect™ Plus. These issues were disclosed as part of the Oracle Critical Patch Update CPU in April 2018 and July 2018. Vulnerability Details CVEID: CVE-2018-2783 DESCRIPTION: An unspecified vulnerability i...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Spectrum Protect Plus (CVE-2017-3736, CVE-2017-3737, CVE-2017-3738)

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project on November 2, 2017 and December 7, 2017. OpenSSL, used by the IBM Spectrum Protect Plus, has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-3736 DESCRIPTION: OpenSSL could allow a remote attacker to obtai...

Security Bulletin: OpenSSH vulnerability affects IBM Spectrum Protect Plus (CVE-2017-15906)

Summary OpenSSH is vulnerable to a denial of service vulnerability which affects IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2017-15906 DESCRIPTION: OpenSSH is vulnerable to a denial of service, caused by an error in the processopen function when in read-only mode. A remote...